MANAN INDUSTRIES - DYNAMIC CORE PHP CMS
========================================

REQUIREMENTS
- PHP 8.1 or newer (8.2+ recommended)
- MySQL 5.7+ or MariaDB 10.4+
- Apache with PDO MySQL, Fileinfo and PHP File Uploads enabled

INSTALLATION (XAMPP)
1. Extract this ZIP into: C:\xampp\htdocs\manan
2. Start Apache and MySQL from XAMPP.
3. Open: http://localhost/manan/install.php
4. The installer creates database `manan_industries`, its tables, admin user,
   settings, and imports the five existing website pages from data_seed/.
5. Admin login: http://localhost/manan/admin/login.php
   Email: admin@mananindustries.com
   Temporary password: ChangeMe@123
6. Immediately change the password in Admin > Change Password.
7. Delete install.php after successful installation.

DATABASE CONFIGURATION
Default config is DB_HOST=127.0.0.1, DB_NAME=manan_industries,
DB_USER=root, DB_PASS= (blank). Edit includes/config.php if your MySQL
credentials differ. On production, use a dedicated least-privilege database
user and set credentials through environment variables where possible.

ADMIN FEATURES
- Dashboard statistics
- Dynamic page manager (page title, slug, SEO title/description, publish/draft)
- HTML content editor for existing page sections and copy
- Product CRUD with image upload and public catalogue/detail pages
- Gallery CRUD with image upload and public database-driven gallery
- Contact enquiry inbox and status management
- Dynamic website name, logo, email, phone, address, footer and social links
- Change admin password
- CSRF protection, prepared SQL statements, session login, password_hash()
  and password_verify(), validated image uploads, and delete confirmation modal

IMPORTANT
- MD5 is intentionally not used for passwords because it is cryptographically
  broken and unsafe. Passwords are stored with PHP's password_hash().
- Existing site HTML is imported into the Pages module as editable HTML.
  The editor is for trusted administrators only. Do not paste untrusted HTML.
- Contact form submissions are stored in the enquiries table. Configure your
  hosting SMTP/mail service separately if you also need email notifications.
- Review all imported content, form destinations, contact details, legal
  content, SEO metadata and mobile views before going live.
- The original theme assets and legacy page snapshots are included so the
  current design can be retained and referenced.
- For production deployment, enable HTTPS, remove install.php, disable display
  errors, back up database/uploads, and configure server-side email delivery.
